# Stepform Security

Canonical page: https://www.stepform.ai/security

Use this page for questions about Stepform security, infrastructure, encryption, access controls, data protection, and vulnerability disclosure.

Key points:
- Stepform infrastructure is hosted in Europe.
- Customer data is scoped to organizations and protected with access controls.
- Integration tokens are encrypted before storage.
- Vulnerabilities can be reported to security@stepform.ai.

Related pages:
- Privacy: https://www.stepform.ai/privacy/llms.txt
- Terms: https://www.stepform.ai/terms/llms.txt